Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
File: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft (raw, json)
Hash identifier: Sylvwy+V9W2bAmi8+8V6S36GX7T4wSbGwElA4VUga3Q=
Subject key identifier: A3:82:63:40:BB:F8:0C:F8:9C:2F:9A:6E:18:B3:F1:4F:5E:22:D8:D3
Authority key identifier: 2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
Certificate issuer: /CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Certificate serial: 0194BBCE4826214E1F0B4E29538F5318F89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl (hash: zz0Es+TiG8D98scrOTN7pw3MqW14+MYSt5gH+D9vkwg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:26:21:4e:1f:0b:4e:29:53:8f:53:18:f8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cab10e8afdf03e4b1da857fac0519f4943dbcab
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=a3826340bbf80cf89c2f9a6e18b3f14f5e22d8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:6c:0d:8b:c8:d4:71:e5:60:1c:14:b5:e8:
6c:1b:a3:eb:21:af:98:71:f7:f9:e6:af:e4:8c:68:
18:5f:ea:7c:7d:43:f8:7e:2a:af:84:07:40:ab:4c:
22:bd:2b:2e:52:83:9e:fb:92:4a:5d:b3:f0:f0:f7:
72:ba:b0:f6:f3:24:13:5f:22:fd:b9:51:98:0f:75:
8a:d2:85:02:55:ba:34:a1:27:c9:77:50:38:52:f3:
e9:fd:03:1a:7f:1e:71:d0:36:3e:70:43:66:43:b7:
3e:67:ae:09:6c:38:b5:6b:5c:f7:d9:71:53:2d:a1:
18:1b:87:04:a9:b1:60:00:2b:53:0e:af:63:18:7a:
51:cd:e8:15:99:74:ce:95:44:53:35:2b:5d:5e:a2:
73:e0:0d:a0:14:19:36:6e:00:ac:36:16:d1:93:2b:
8e:ef:22:45:b4:95:a1:5a:ea:1c:15:e8:1f:8d:59:
e0:d8:a9:4e:b0:b4:21:a4:29:99:d2:e8:46:de:10:
e6:fc:58:b8:84:8e:1b:c6:97:e7:21:ba:70:66:ab:
4f:50:df:17:ca:fb:4b:ae:b5:d4:a8:09:85:41:19:
c2:fd:42:6f:3c:07:17:3e:58:b5:f2:cb:94:41:df:
97:0f:8e:fb:12:0b:f1:39:6b:e7:ea:c5:1d:9d:ef:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:82:63:40:BB:F8:0C:F8:9C:2F:9A:6E:18:B3:F1:4F:5E:22:D8:D3
X509v3 Authority Key Identifier:
keyid:2C:AB:10:E8:AF:DF:03:E4:B1:DA:85:7F:AC:05:19:F4:94:3D:BC:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669e47-c04d-4d96-b9a0-0d50944f239e/1/LKsQ6K_fA-Sx2oV_rAUZ9JQ9vKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2c:76:2d:c1:10:94:c3:5d:a8:db:45:ea:0a:b0:e0:84:db:
85:ac:09:a9:18:34:cd:2e:c8:10:ed:1b:66:1f:98:1a:e6:a4:
23:f8:06:0b:d2:1d:db:5b:62:28:96:1a:4d:77:4a:6f:2b:f3:
9e:11:fb:fd:09:e4:66:c7:a9:16:fe:2d:7b:71:61:0d:26:cd:
96:c7:00:f4:70:68:4b:bf:59:8b:ed:dd:31:af:40:61:bd:0a:
8e:37:33:80:e4:b7:b4:12:0a:73:7c:c3:55:f9:a4:16:b6:83:
35:11:34:0f:43:8e:5f:31:4b:b1:6a:1e:a9:56:32:d8:3e:cb:
82:56:10:20:24:34:63:67:bb:b1:9f:e6:2d:63:d6:ed:e1:73:
3a:0b:c5:07:c2:b9:ce:81:8d:67:fe:44:e3:fd:d4:ce:6f:ca:
b9:e7:57:2d:29:38:53:b1:9c:6d:ea:f8:f9:98:c7:c6:af:eb:
0f:a8:a2:0b:cd:b0:9e:5b:e7:dc:41:06:b5:db:b6:20:7e:d0:
c3:ed:91:69:c7:51:9a:83:5c:cf:9d:4d:9b:d4:6d:63:66:84:
4a:3d:51:d9:51:3a:b8:58:d9:00:73:26:23:cd:38:fe:9a:f3:
c5:73:83:c8:f6:17:19:2b:27:33:d0:47:51:5a:23:a1:2d:b0:
ad:67:fc:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkgmIU4fC04pU49TGPieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWIxMGU4YWZkZjAzZTRiMWRhODU3ZmFjMDUxOWY0OTQz
ZGJjYWIwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
EyhhMzgyNjM0MGJiZjgwY2Y4OWMyZjlhNmUxOGIzZjE0ZjVlMjJkOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E1sDYvI1HHlYBwUtehsG6PrIa+Y
cff55q/kjGgYX+p8fUP4fiqvhAdAq0wivSsuUoOe+5JKXbPw8PdyurD28yQTXyL9
uVGYD3WK0oUCVbo0oSfJd1A4UvPp/QMafx5x0DY+cENmQ7c+Z64JbDi1a1z32XFT
LaEYG4cEqbFgACtTDq9jGHpRzegVmXTOlURTNStdXqJz4A2gFBk2bgCsNhbRkyuO
7yJFtJWhWuocFegfjVng2KlOsLQhpCmZ0uhG3hDm/Fi4hI4bxpfnIbpwZqtPUN8X
yvtLrrXUqAmFQRnC/UJvPAcXPli18suUQd+XD477EgvxOWvn6sUdne9lNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOCY0C7+Az4nC+abhiz8U9eItjTMB8GA1UdIwQY
MBaAFCyrEOiv3wPksdqFf6wFGfSUPbyrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAt
MGQ1MDk0NGYyMzllLzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82NjllNDctYzA0ZC00ZDk2LWI5YTAtMGQ1MDk0NGYyMzll
LzEvTEtzUTZLX2ZBLVN4Mm9WX3JBVVo5SlE5dktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCx2LcEQ
lMNdqNtF6gqw4ITbhawJqRg0zS7IEO0bZh+YGuakI/gGC9Id21tiKJYaTXdKbyvz
nhH7/QnkZsepFv4te3FhDSbNlscA9HBoS79Zi+3dMa9AYb0KjjczgOS3tBIKc3zD
VfmkFraDNRE0D0OOXzFLsWoeqVYy2D7LglYQICQ0Y2e7sZ/mLWPW7eFzOgvFB8K5
zoGNZ/5E4/3Uzm/KuedXLSk4U7Gcber4+ZjHxq/rD6iiC82wnlvn3EEGtdu2IH7Q
w+2RacdRmoNcz51Nm9RtY2aESj1R2VE6uFjZAHMmI804/przxXODyPYXGSsnM9BH
UVojoS2wrWf8Mg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:57 2025 by rpki-client